Activity log for bug #695259

Date Who What changed Old value New value Message
2010-12-29 05:37:21 Aron Xu bug added bug
2010-12-29 05:40:06 Aron Xu description Balance tree action of btrfs command should be limited to only root user, because it may cause data corrupt and usually result in an uninterruptible process which is causing a heavy I/O load (the process may keep runing for a long time because the action is not a easy deal). Run the following command as a non-root user will also start the balance tree action ( / is btrfs here, with ext4 /boot): $ btrfs filesystem balance / I think this problem will cause serious issues if somebody uses it in a production system (though it is really not recommended), so I give it an RC severity. If you think it should be changed, feel free to do it. What's more, I'm not sure whether this should be a bug in the Linux kernel, because such action is actually performed by using system calls. If I try to make a snapshot in a directory by a user who does not have the access, it will generate an error like this: $ pwd /home $ whoami aron $ btrfs subvolume snapshot . backhome Create a snapshot of '.' in './backhome' ERROR: cannot snapshot '.' Balance tree action of btrfs command should be limited to only root user, because it may cause data corrupt and usually result in an uninterruptible process which is causing a heavy I/O load (the process may keep runing for a long time because the action is not a easy deal). Run the following command as a non-root user will also start the balance tree action ( / is btrfs here, with ext4 /boot): $ btrfs filesystem balance / I think this problem will cause serious issues if somebody uses it in a production system (though it is really not recommended). What's more, I'm not sure whether this should be a bug in the Linux kernel/btrfs-tools, because such action is actually performed by using system calls. If I try to make a snapshot in a directory by a user who does not have the access, it will generate an error like this: $ pwd /home $ whoami aron $ btrfs subvolume snapshot . backhome Create a snapshot of '.' in './backhome' ERROR: cannot snapshot '. I think at least a workaround is needed to be settled in btrfs-tools (geteuid test) before the kernel side has this problem fixed.
2010-12-29 05:41:10 Aron Xu bug task added btrfs-tools (Ubuntu)
2010-12-30 08:12:38 Aron Xu bug added subscriber Ubuntu Security Team
2011-01-05 21:47:19 isoma summary balance tree action should be only triggered by root btrfs tree balance can be triggered by non-root user
2011-01-12 21:12:12 Kees Cook btrfs-tools (Ubuntu): status New Invalid
2011-01-12 21:13:18 Marc Deslauriers linux (Ubuntu): status New Confirmed
2011-01-12 21:13:21 Marc Deslauriers linux (Ubuntu): importance Undecided Low
2011-01-12 21:13:24 Kees Cook linux (Ubuntu): status Confirmed Incomplete
2011-01-12 21:13:28 Kees Cook linux (Ubuntu): status Incomplete Confirmed
2011-01-13 01:56:08 Aron Xu bug watch added http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=608185
2012-05-07 04:27:12 Gary M bug added subscriber Gary M
2012-05-07 04:30:58 Gary M bug task added linux-2.6 (Debian)
2012-05-07 04:32:08 Gary M security vulnerability no yes
2012-05-07 10:27:26 Bug Watch Updater linux-2.6 (Debian): status Unknown Fix Released
2012-07-16 12:38:53 Gary M bug watch added mailto:linux-btrfs@vger.kernel.org
2012-07-16 12:38:53 Gary M bug task added linux
2012-07-16 12:41:10 Gary M linux: status New Fix Released
2012-07-16 12:42:25 Gary M linux (Ubuntu): status Confirmed Fix Released
2012-07-16 13:02:07 Gary M tags lucid maverick natty